CVE-2013-4151 PUBLISHED

The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.

EPSS 1.38% · 80.2th percentile

Risk Scores

EPSS Score
1.38%
80.2th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSqemu0, 1.5.0+dfsg-3ubuntu5, 1.5.0+dfsg-3ubuntu6

Timeline

References

Open in Interactive Console →